• anlumo@feddit.de
      link
      fedilink
      arrow-up
      39
      ·
      8 months ago

      Yeah, this worked so well for XMPP when everybody federated with Gmail chat.

      • Avid Amoeba@lemmy.ca
        link
        fedilink
        arrow-up
        26
        ·
        8 months ago

        There’s even less privacy if I have to have the WhatsApp app installed on my phone to send that message.

      • InfiniWheel@lemmy.one
        link
        fedilink
        arrow-up
        13
        ·
        8 months ago

        You have the big plus of not having the WhatsApp app installed and snooping around with all those permissions it has.

      • n2burns@lemmy.ca
        link
        fedilink
        arrow-up
        4
        ·
        8 months ago

        Would it not be E2EE? Isn’t that one of the reasons for using the Signal protocol?

        • muhyb@programming.dev
          link
          fedilink
          arrow-up
          11
          ·
          8 months ago

          Yes, the “delivering” part would be E2EE. Do we really know the afterwards if they can read their users’ messages? They probably can.

          • falsemirror@beehaw.org
            link
            fedilink
            arrow-up
            11
            ·
            8 months ago

            Whatsapp CANNOT read messages when e2ee is enabled, this client-side snooping was discussed when the protocol was first implemented. Whatsapp collects a ton of metadata and social graph info, but not message content.

            • blackstrat@lemmy.fwgx.uk
              link
              fedilink
              arrow-up
              4
              ·
              8 months ago

              Well you type messages in in plain text and they decrypt it to show you the messages at the other end. So they can do the nefarious processing on the client side and send back results to the mother ship. E2EE is only good when you trust the two ends, but with WhatsApp and Messenger you shouldn’t trust the ends.

              • sunbeam60@lemmy.one
                link
                fedilink
                arrow-up
                1
                ·
                8 months ago

                At the end of the day, you’ve got to trust someone. I’m 200% convinced meta mines the social graph, of course they do, and provide access to law enforcement with a pro forma request. But I’m also 199% sure they don’t actually read your messages once unencrypted, reencrypts them and sends them as hidden payloads or does something else with it. The damage, should it be discovered, would be untold.

                And while I don’t trust Meta on a lot of things, I know enough people there to realise that if they did that it would leak.

                • blackstrat@lemmy.fwgx.uk
                  link
                  fedilink
                  arrow-up
                  1
                  ·
                  8 months ago

                  It wouldn’t matter to them really. Just look at how many people have gmail accounts.

                  They don’t even have to send the whole messages back to base. They could be categorizing your messages in to themes and sending that back to base as small category flags. Use that to build a profile on you and use those for advertising to you.

                  You mention something on the theme of ‘broken boiler’ in a message, that gets analyzed on the client in to a category of ‘interest in heating / boiler repair’, plus some adjacent categories based on your demographic. The categorization gets sent back and the next website you visit has an ad for British Gas boiler repair.

          • n2burns@lemmy.ca
            link
            fedilink
            arrow-up
            5
            ·
            8 months ago

            Sure, but any messaging app (including Signal) could have these backdoors in place. Heck, there’s even vectors for unrelated apps on your phone to read this data once unencrypted.

        • authorinthedark@lemmy.sdf.org
          link
          fedilink
          English
          arrow-up
          3
          ·
          8 months ago

          if i remember correctly, it would be E2EE (WhatsApp and Messenger are too) but Meta stores the encrypted message on their server

      • ViciousTurducken@lemmy.one
        link
        fedilink
        arrow-up
        10
        ·
        edit-2
        8 months ago

        Them being nonprofit has nothing to do with the pursuit of marketshare. Plenty of nonprofits want to maximize marketshare. Them being nonprofit means they are mission-driven.

        And what is that mission?

        Per the Signal Foundation’s website:

        Protect free expression and enable secure global communication through open source privacy technology.

        • helenslunch@feddit.nl
          link
          fedilink
          arrow-up
          10
          ·
          edit-2
          8 months ago

          Them being nonprofit has nothing to do with the pursuit of marketshare.

          Um, of course it does? LOL

          Them being nonprofit means they are mission-driven.

          And what is that mission?

          Let’s talk about what the opposite of their mission is: Mainly operating as a source of data collection and revenue for a corporate surveillance and advertising agency.

          Do they want more users? Sure. Are they going to compromise on their core principles out of convenience for their users? Abso-fuckin-lutely not.

          There’s also the opposite to consider: that users would decide to use WhatsApp instead of Signal because they can, which then puts you in the uncomfortable position I find myself in often where I have to tell people I’m not accepting their messages from insecure platforms.